cPanel vulnerability alert

From my hosting company:

-------------------------

cPanel has recently disclosed that a security vulnerability has been patched in all current versions of cPanel and WHM. The details of the vulnerability were not disclosed, however they have indicated that upgrading as soon as possible is strongly recommended. cPanel indicated that they do not believe any publicly available exploits exist.

The following cPanel & WHM versions address all known vulnerabilities:

11.32.3.19 for EDGE and CURRENT update tier
11.32.2.28 for RELEASE, STABLE, and 11.32 LTS update tier
11.30.6.8 for 11.30 LTS update tier

The latest public releases of cPanel & WHM for all update tiers is published at http://httpupdate.cpanel.net.

To update cPanel and WHM, take ONE of the following actions:

- Log into WHM and click on the option "Upgrade to Latest Version", then click the "Click to Upgrade" button.
- Log in to your server using SSH and run /usr/local/cpanel/scripts/upcp

Further information may be found here:

http://docs.cpanel.net/twiki/bin/view/11_30/WHMDocs/UpgradeVersion

Please see the following article for further information:

http://www.cpanel.net/2012/05/targeted-security-release-20120531-announcement.html

If your host runs cPanel, best to check which version he is providing you then. If it's a vulnerable version, I wouldn't hesitate to ask when the upgrade is scheduled for your specific server.

Good hosts (like the one we encountered at CMSExpo) are security-conscious and will make sure they get this kind of upgrades deployed as soon as possible. Also, good hosts will not rush into deploying this kind of update without doing some tests themselves so it can take a few days.

Thanks for sharing!